PATENT APPLICATION 
IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 
In re the Application of 
Takahiro SUGIMOTO 

Application No.: New U.S. Patent Application 

Filed: May 14, 2001 Docket No.: 109460 

For: METHOD AND APPARATUS FOR ESTABLISHING A SECURITY POLICY, AND 
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INFORMATION DISCLOSURE STATEMENT 



Director of the U.S. Patent and Trademark Office 
Washington, D.C. 20231 



Sir: 



Pursuant to 37 CFR §1.56, the attention of the Patent and Trademark Office is hereby 
greeted to the reference(s) listed on the attached PTO-1449. Unless otherwise indicated herein, 
one copy of each reference is attached. It is respectfully requested that the information be 
^Ox-pressjy ^considered during the prosecution of this application, and that the reference(s) be made 
o£record therein and appear among the "References Cited" on any patent to issue therefrom. 

1^1 1 . This Information Disclosure Statement is being filed (a) within three months of 
the U.S. filing date of this non-CPA application, OR (b) before the mailing date of a first 
Office Action on the merits in the present application. No certification or fee is required. 



Respectfully submitted, 

James A. Oliff 
Registration No. 27,075 



Thomas J. Pardini 
Registration No. 30,41 1 



JAO:TJP/cca 



Date: May 14, 2001 

Oliff & Berridge, plc 
P.O. Box 19928 
Alexandria, Virginia 22320 
Telephone: (703) 836-6400 



DEPOSIT ACCOUNT USE 

AUTHORIZATION 
Please grant any extension 

necessary for entry; 
Charge any fee due to our 
Deposit Account No. 1 5-046 1 
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OTHER DOCUMENTS (Including Author, Title, Date, Pertinent Pages, etc.) 



COBIT steering Committee and Information Systems Audit and Control Foundation : COBIT Executive Summary 2 nd 
Edition (1998) (http://www.isaca.org/execl.htm) 



ISO/IEC TR 13335-1-3 (GMITS) Technical Report (1996-1998) 



GENERALLY-ACCEPTED SYSTEM SECURITY PRINCIPLES (GASSP) V2 (1999) (http://web.mit.edu/security 
/www/gassopl.html) 



Common Criteria V2 (http://csrc.nist.gov/cc/ccv20/ccv21ist.htm) 



"The Information Security Maturity Grid" Timothy R. Stacey Information System Security p. 22 Summer 1996 



EXAMINER 



DATE CONSIDERED 



Examiner: Initial if citation considered, whether or not citation is in conformance with M.P.E.P. 609; draw line through citation if not in 
conformance and not considered. Include copy of this form with next communication to applicant. 



